Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/bb78eb1a-9412-3405-9bd8-719099b6b1a5.roa
File:                     bb78eb1a-9412-3405-9bd8-719099b6b1a5.roa (raw, json)
Hash identifier:          EPKhIEaPF/0iqJEeJkvhxy+FhMj7xhpP+Q0izPhnUo0=
Subject key identifier:   77:EE:5E:28:C0:79:C4:E1:ED:A1:E6:A7:FB:85:08:91:38:AA:96:45
Certificate issuer:       /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
Certificate serial:       010D0C9F4328584F27F253149EEDF9C39EFD6C40
Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/bb78eb1a-9412-3405-9bd8-719099b6b1a5.roa
Signing time:             Sun 13 Sep 2026 01:00:12 +0000
ROA not before:           Sun 13 Sep 2026 01:00:12 +0000
ROA not after:            Sat 12 Dec 2026 02:00:12 +0000
asID:                     7352
IP address blocks:        104.166.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:27:f2:53:14:9e:ed:f9:c3:9e:fd:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
        Validity
            Not Before: Sep 13 01:00:12 2026 GMT
            Not After : Dec 12 02:00:12 2026 GMT
        Subject: CN=eeea10c5-f3fd-4533-aa96-b09e2dd15153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:13:9c:e7:bd:14:4d:02:4e:0f:76:b0:a0:65:
                    c6:29:fd:b7:e8:7f:8a:61:51:ac:20:88:94:3c:8d:
                    5d:4d:77:a1:ca:dc:08:8e:ed:d6:68:7a:ab:29:b1:
                    3c:24:81:36:6b:f2:1d:41:6f:2d:a6:4c:4d:bd:26:
                    fb:18:c9:f1:71:1d:9b:27:0e:5d:71:49:a9:c4:d4:
                    19:85:f8:56:db:53:0e:a2:d3:99:6f:94:b7:77:c9:
                    50:e2:e7:70:a0:12:4c:7d:64:b0:6b:82:12:a2:ea:
                    c2:ba:95:38:3f:f6:6f:52:b7:a5:59:8d:56:c2:9a:
                    a6:15:9c:42:19:84:56:34:f8:31:1c:24:27:0d:3e:
                    e6:be:cc:ff:5e:6a:d9:45:a7:9d:f0:73:71:ac:00:
                    37:75:c8:a3:98:51:cb:19:c4:fe:7c:30:70:f8:1b:
                    59:6a:87:6e:bc:eb:e9:4b:b5:69:fb:f7:c4:5e:74:
                    8e:a7:23:d2:2a:0f:60:3f:3a:c7:fb:3e:6b:cb:f7:
                    43:77:f4:10:d7:dd:46:96:9d:99:81:39:79:9f:ea:
                    d4:4e:78:00:3a:94:f7:af:20:95:61:f4:36:74:99:
                    06:e0:9b:57:a1:e7:a9:95:a5:8a:36:7c:d9:3a:d8:
                    33:05:d4:ac:e2:9d:74:ba:05:cf:e6:9b:4f:ad:6b:
                    13:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EE:5E:28:C0:79:C4:E1:ED:A1:E6:A7:FB:85:08:91:38:AA:96:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/bb78eb1a-9412-3405-9bd8-719099b6b1a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl

            X509v3 Authority Key Identifier:
                keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d0:89:04:bc:e3:f0:15:bc:ac:15:22:ed:7a:1f:6b:ed:9d:
         64:1b:d0:ed:4e:6f:8d:3d:d9:91:f4:57:12:f1:eb:56:98:c4:
         82:d7:57:40:76:3f:d6:78:90:93:f2:42:b1:b5:32:c4:8c:73:
         24:4e:bc:52:f2:04:bc:fd:a7:e0:97:c5:52:25:92:cc:12:93:
         0f:1e:b0:0e:3b:44:d9:f2:aa:9d:81:4e:64:c0:6d:59:69:0f:
         97:a8:8c:68:0a:2e:ec:29:b1:cc:d0:f6:b1:1f:82:c8:cb:3d:
         31:81:85:04:f8:f7:8c:c0:49:57:77:09:79:14:54:f7:ac:89:
         ad:6b:8f:ad:b0:f3:bf:57:58:a5:0d:6d:44:78:32:1f:88:07:
         a6:a6:c9:70:dc:9b:f2:6d:b8:cd:e1:89:d6:80:cb:1e:76:c3:
         1c:bb:74:58:5a:be:39:34:f8:9c:e3:c3:01:65:a1:fa:fd:bf:
         d6:2f:41:24:f5:bc:b1:e9:7e:66:14:83:e7:52:ce:ae:7f:52:
         ec:ba:14:42:1b:5c:ce:c9:49:6f:e4:89:6a:d6:cb:ba:e7:c1:
         0c:4a:92:a1:78:7e:c8:80:4f:3e:9b:de:27:6c:52:3c:c4:3d:
         d5:73:ca:b5:09:90:72:9f:09:6f:48:26:fe:63:45:57:26:0f:
         b9:e4:2d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:46:34 2026 by rpki-client